IP Library Granted Patent US 8,713,583
Granted Patent B2
US 8,713,583 · App. 14/021,852 · Granted Apr 29, 2014

Systems and methods for managing policies on a computer

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 8,713,583
App. No.
14/021,852
Granted
Apr 29, 2014
Kind
B2
Abstract

An apparatus, system, and method are disclosed for managing policies on a computer having a foreign operating system. Policies may specify hardware or software configuration information. Policies on a first computer with a native operating system are translated into configuration information usable on a second computer having a foreign operating system. In an embodiment, a translator manager manages the association between the policy on the first computer and the translator on the second computer. Computer management complexity and information technology management costs are reduced by centralizing computer management on the native operating system. Further reductions in management complexity are realized when the present invention is used in conjunction with network directory services.

Claims (82)

1. A computer system comprising:

a workstation having a non-Windows operating system, a tangible computer storage medium with user applications stored therein, and a computer processor;

a policy refresh component, stored in the storage medium, that checks whether a Windows native policy stored on a Windows computer and associated with the workstation has been changed;

a translator manager, stored in the storage medium, that manages the association of the Windows native policy with the workstation and, upon a determination by the policy refresh component that the Windows native policy has been changed, receives the Windows native policy from the Windows computer;

a policy translator, stored in the storage medium, that receives the Windows native policy from the translator manager and translates the Windows native policy into configuration information usable by the non-Windows operating system;

an update configuration component, stored in the storage medium, that applies the configuration information usable by the non-Windows operating system by saving the configuration information in a policy-related file on the workstation;

wherein the Windows native policy can be read, in its native format, by a Windows operating system to set policy settings for Windows computers but cannot be read, in its native format, by a non-Windows operating system to set policy settings for non-Windows computers; and

wherein the Windows native policy is used to set configurable options for at least one computer user, and wherein, after translation by the workstation, the Windows native policy remains centrally managed and updated by the Windows computer, and updates to the Windows native policy are propagated to the workstation, such that use of Windows native policies is extended to allow an administrator to use Windows native policies to manage configuration information on the workstation.

2. The system of claim 1 , wherein the Windows native policy defines configuration of at least one application for each of a plurality of users within a group.

3. The system of claim 1 , wherein the Windows native policy defines configuration information for each of a plurality of users within a group.

4. The system of claim 1 , wherein the policy refresh component checks whether the Windows native policy has been changed at least by polling the Windows computer at periodic intervals.

5. The system of claim 1 , wherein the policy refresh component checks whether the Windows native policy has been changed at least by receiving a notification from the Windows computer that the Windows native policy has been changed.

6. The system of claim 1 , wherein the workstation is a desktop computer.

7. The system of claim 1 , wherein at least one of the user applications stored in the storage medium is a word processing application.

8. A method comprising:

managing, on a workstation having a non-Windows operating system, a tangible computer storage medium with user applications stored therein, and a computer processor, an association between the workstation and a Windows native policy stored on a Windows computer;

checking, by the workstation, whether the Windows native policy stored on the Windows computer and associated with the workstation has been changed;

upon a determination by the workstation that the Windows native policy has been changed, receiving, on the workstation, the Windows native policy from the Windows computer;

translating, on the workstation, the Windows native policy into configuration information usable by the non-Windows operating system; and

applying the configuration information usable by the non-Windows operating system by saving the configuration information in a policy-related file on the workstation;

wherein the Windows native policy can be read, in its native format, by a Windows operating system to set policy settings for Windows computers but cannot be read, in its native format, by a non-Windows operating system to set policy settings for non-Windows computers; and

wherein the Windows native policy is used to set configurable options for at least one computer user, and wherein, after translation by the workstation, the Windows native policy remains centrally managed and updated by the Windows computer, and updates to the Windows native policy are propagated to the workstation, such that use of Windows native policies is extended to allow an administrator to use Windows native policies to manage configuration information on the workstation.

9. The method of claim 8 , wherein the Windows native policy defines configuration of at least one application for each of a plurality of users within a group.

10. The method of claim 8 , wherein the Windows native policy defines configuration information for each of a plurality of users within a group.

11. The method of claim 8 , wherein checking whether the Windows native policy has been changed includes polling the Windows computer at periodic intervals.

12. The method of claim 8 , wherein checking whether the Windows native policy has been changed includes receiving, on the workstation, a notification from the Windows computer that the Windows native policy has been changed.

13. The method of claim 8 , wherein the workstation is a desktop computer.

14. The method of claim 8 , wherein at least one of the user applications stored in the storage medium is a word processing application.

15. A policy management and update system that uses Windows native policies to manage policy settings on a Linux computer, the system comprising:

a workstation having a Linux operating system, a tangible computer storage medium with user applications stored therein, and a computer processor, wherein the workstation allows a user to login to the Linux operating system and to access one or more application programs comprising at least a word processing program;

a policy refresh component, stored in the storage medium, that checks whether a Windows native policy stored on a Windows computer and associated with the workstation has been changed;

a translator manager, stored in the storage medium, that manages the association of the Windows native policy with the workstation and, upon a determination by the policy refresh component that the Windows native policy has been changed, receives the Windows native policy from the Windows computer;

a policy translator, stored in the storage medium, that receives the Windows native policy from the translator manager and translates the Windows native policy into configuration information usable by the Linux operating system;

an update configuration component, stored in the storage medium, that applies the configuration information usable by the Linux operating system by saving the configuration information in a policy-related file on the workstation;

wherein the Windows native policy can be read, in its native format, by a Windows operating system to set policy settings for Windows computers but cannot be read, in its native format, by a Linux operating system to set policy settings for Linux computers; and

wherein the Windows native policy is used to set configurable options for at least one computer user, and wherein, after translation by the workstation, the Windows native policy remains centrally managed and updated by the Windows computer, and updates to the Windows native policy are propagated to the workstation, such that use of Windows native policies is extended to allow an administrator to use Windows native policies to manage configuration information on the workstation.

16. The system of claim 15 , wherein the Windows native policy defines configuration of at least one application for each of a plurality of users within a group.

17. The system of claim 15 , wherein the Windows native policy defines configuration information for each of a plurality of users within a group.

18. The system of claim 15 , wherein the policy refresh component checks whether the Windows native policy has been changed at least by polling the Windows computer at periodic intervals.

19. The system of claim 15 , wherein the policy refresh component checks whether the Windows native policy has been changed at least by receiving a notification from the Windows computer that the Windows native policy has been changed.

20. The system of claim 15 , wherein the workstation is a desktop computer.

21. The system of claim 15 , wherein the update configuration component changes configuration information of the word processing program.

22. A method of managing and updating policy settings on a Linux computer using Windows native policies, the method comprising:

managing, on a workstation having a Linux operating system, a tangible computer storage medium with user applications stored therein, and a computer processor, an association between the workstation and a Windows native policy stored on a Windows computer, wherein the workstation allows a user to login to the Linux operating system and to access one or more application programs comprising at least a word processing program;

checking, by the workstation, whether the Windows native policy stored on the Windows computer and associated with the workstation has been changed;

upon a determination by the workstation that the Windows native policy has been changed, receiving, on the workstation, the Windows native policy from the Windows computer;

translating, on the workstation, the Windows native policy into configuration information usable by the Linux operating system; and

applying the configuration information usable by the Linux operating system by saving the configuration information in a policy-related file on the workstation;

wherein the Windows native policy can be read, in its native format, by a Windows operating system to set policy settings for Windows computers but cannot be read, in its native format, by a Linux operating system to set policy settings for Linux computers; and

wherein the Windows native policy is used to set configurable options for at least one computer user, and wherein, after translation by the workstation, the Windows native policy remains centrally managed and updated by the Windows computer, and updates to the Windows native policy are propagated to the workstation, such that use of Windows native policies is extended to allow an administrator to use Windows native policies to manage configuration information on the workstation.

23. The method of claim 22 , wherein the Windows native policy defines configuration of at least one application for each of a plurality of users within a group.

24. The method of claim 22 , wherein the Windows native policy defines configuration information for each of a plurality of users within a group.

25. The method of claim 22 , wherein checking whether the Windows native policy has been changed includes polling the Windows computer at periodic intervals.

26. The method of claim 22 , wherein checking whether the Windows native policy has been changed includes receiving, on the workstation, a notification from the Windows computer that the Windows native policy has been changed.

27. The method of claim 22 , wherein the workstation is a desktop computer.

28. The method of claim 22 , wherein applying the configuration information updates configuration information of the word processing program.

29. A Windows native policy application system that applies a Windows native policy to set configuration information of at least a word processing program on a Unix computer, the system comprising:

a workstation having a Unix operating system, a tangible computer storage medium with user applications stored therein, and a computer processor, wherein the workstation allows a user to login to the Unix operating system and to access one or more application programs comprising at least a word processing program;

a policy refresh component, stored in the storage medium, that, upon user login to the workstation, checks whether a Windows native policy stored on a Windows computer and associated with the workstation has been changed;

a translator manager, stored in the storage medium, that manages the association of the Windows native policy with the workstation and, upon a determination by the policy refresh component that the Windows native policy has been changed, receives the Windows native policy from the Windows computer;

a policy translator, stored in the storage medium, that receives the Windows native policy from the translator manager and translates the Windows native policy into configuration information usable by the Unix operating system;

an update configuration component, stored in the storage medium, that applies the configuration information usable by the Unix operating system by saving the configuration information in a policy-related file on the workstation, wherein application of the configuration information updates configuration information of at least the word processing program;

wherein the Windows native policy can be read, in its native format, by a Windows operating system to set policy settings for Windows computers but cannot be read, in its native format, by a Unix operating system to set policy settings for Linux computers; and

wherein the Windows native policy is used to set configurable options for at least one computer user, and wherein, after translation by the workstation, the Windows native policy remains centrally managed and updated by the Windows computer, and updates to the Windows native policy are propagated to the workstation, such that use of Windows native policies is extended to allow an administrator to use Windows native policies to manage configuration information on the workstation.

30. The system of claim 29 , wherein the Windows native policy defines configuration of at least one application for each of a plurality of users within a group.

31. The system of claim 29 , wherein the Windows native policy defines configuration information for each of a plurality of users within a group.

32. The system of claim 29 , wherein the policy refresh component checks whether the Windows native policy has been changed at least by polling the Windows computer at periodic intervals.

33. The system of claim 29 , wherein the policy refresh component checks whether the Windows native policy has been changed at least by receiving a notification from the Windows computer that the Windows native policy has been changed.

34. The system of claim 29 , wherein the workstation is a desktop computer.

35. A method of applying a Windows native policy to set configuration information of at least a word processing program on a Unix computer comprising:

managing, on a workstation having a Unix operating system, a tangible computer storage medium with user applications stored therein, and a computer processor, an association between the workstation and a Windows native policy stored on a Windows computer, wherein the workstation allows a user to login to the Unix operating system and to access one or more application programs comprising at least a word processing program;

upon user login to the workstation, checking, by the workstation, whether the Windows native policy stored on the Windows computer and associated with the workstation has been changed;

upon a determination by the workstation that the Windows native policy has been changed, receiving, on the workstation, the Windows native policy from the Windows computer;

translating, on the workstation, the Windows native policy into configuration information usable by the Unix operating system; and

applying the configuration information usable by the Linux operating system by saving the configuration information in a policy-related file on the workstation, wherein application of the configuration information updates configuration information of at least the word processing program;

wherein the Windows native policy can be read, in its native format, by a Windows operating system to set policy settings for Windows computers but cannot be read, in its native format, by a Unix operating system to set policy settings for Unix computers; and

wherein the Windows native policy is used to set configurable options for at least one computer user, and wherein, after translation by the workstation, the Windows native policy remains centrally managed and updated by the Windows computer, and updates to the Windows native policy are propagated to the workstation, such that use of Windows native policies is extended to allow an administrator to use Windows native policies to manage configuration information on the workstation.

36. The method of claim 35 , wherein the Windows native policy defines configuration of at least one application for each of a plurality of users within a group.

37. The method of claim 35 , wherein the Windows native policy defines configuration information for each of a plurality of users within a group.

38. The method of claim 35 , wherein checking whether the Windows native policy has been changed includes polling the Windows computer at periodic intervals.

39. The method of claim 35 , wherein checking whether the Windows native policy has been changed includes receiving, on the workstation, a notification from the Windows computer that the Windows native policy has been changed.

40. The method of claim 35 , wherein the workstation is a desktop computer.

Assignments (26)
RELEASE OF SECURITY INTEREST Recorded Nov 19, 2025
From: MORGAN STANLEY SENIOR FUNDING, INC.
To: QUEST SOFTWARE INC.; ANALYTIX DATA SERVICES INC.; BINARYTREE.COM LLC; ERWIN, INC.
Reel/Frame 073606/0001 →
RELEASE OF SECURITY INTEREST Recorded Nov 18, 2025
From: GOLDMAN SACHS BANK USA, AS COLLATERAL AGENT
To: QUEST SOFTWARE INC.; ANALYTIX DATA SERVICES INC.; BINARYTREE.COM LLC; ERWIN, INC.
Reel/Frame 073613/0326 →
SECURITY INTEREST Recorded Jun 8, 2025
From: QUEST SOFTWARE INC.; ANALYTIX DATA SERVICES INC.; ERWIN, INC.
To: ALTER DOMUS (US) LLC
Reel/Frame 071527/0001 →
SECURITY INTEREST Recorded Jun 8, 2025
From: QUEST SOFTWARE INC.; ANALYTIX DATA SERVICES INC.; ERWIN, INC.
To: ALTER DOMUS (US) LLC
Reel/Frame 071527/0649 →
CORRECTIVE ASSIGNMENT TO CORRECT THE RECEIVING PARTY DATA PREVIOUSLY RECORDED ON REEL 70194 FRAME 942. ASSIGNOR(S) HEREBY CONFIRMS THE ASSIGNMENT. Recorded Mar 27, 2025
From: QUEST SOFTWARE INC.
To: ONE IDENTITY LLC
Reel/Frame 070678/0366 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Feb 12, 2025
From: QUEST SOFTWARE INC.
To: ONE IDENTIFY LLC
Reel/Frame 070194/0942 →
FIRST LIEN INTELLECTUAL PROPERTY SECURITY AGREEMENT Recorded Feb 2, 2022
From: QUEST SOFTWARE INC.; ANALYTIX DATA SERVICES INC.; BINARYTREE.COM LLC; ERWIN, INC.; ONE IDENTITY LLC; ONELOGIN, INC.; ONE IDENTITY SOFTWARE INTERNATIONAL DESIGNATED ACTIVITY COMPANY
To: GOLDMAN SACHS BANK USA
Reel/Frame 058945/0778 →
SECOND LIEN INTELLECTUAL PROPERTY SECURITY AGREEMENT Recorded Feb 2, 2022
From: QUEST SOFTWARE INC.; ANALYTIX DATA SERVICES INC.; BINARYTREE.COM LLC; ERWIN, INC.; ONE IDENTITY LLC; ONELOGIN, INC.; ONE IDENTITY SOFTWARE INTERNATIONAL DESIGNATED ACTIVITY COMPANY
To: MORGAN STANLEY SENIOR FUNDING, INC.
Reel/Frame 058952/0279 →
RELEASE OF SECOND LIEN SECURITY INTEREST IN PATENTS Recorded Feb 2, 2022
From: CREDIT SUISSE AG, CAYMAN ISLANDS BRANCH, AS COLLATERAL AGENT
To: QUEST SOFTWARE INC.
Reel/Frame 059096/0683 →
RELEASE OF FIRST LIEN SECURITY INTEREST IN PATENTS Recorded Feb 2, 2022
From: CREDIT SUISSE AG, CAYMAN ISLANDS BRANCH, AS COLLATERAL AGENT
To: QUEST SOFTWARE INC.
Reel/Frame 059105/0479 →
FIRST LIEN PATENT SECURITY AGREEMENT Recorded Jun 7, 2018
From: QUEST SOFTWARE INC.
To: CREDIT SUISSE AG, CAYMAN ISLANDS BRANCH, AS COLLATERAL AGENT
Reel/Frame 046327/0347 →
SECOND LIEN PATENT SECURITY AGREEMENT Recorded Jun 7, 2018
From: QUEST SOFTWARE INC.
To: CREDIT SUISSE AG, CAYMAN ISLANDS BRANCH, AS COLLATERAL AGENT
Reel/Frame 046327/0486 →
RELEASE OF FIRST LIEN SECURITY INTEREST IN PATENTS RECORDED AT R/F 040581/0850 Recorded May 22, 2018
From: CREDIT SUISSE AG, CAYMAN ISLANDS BRANCH, AS COLLATERAL AGENT
To: QUEST SOFTWARE INC. (F/K/A DELL SOFTWARE INC.); AVENTAIL LLC
Reel/Frame 046211/0735 →
CHANGE OF NAME Recorded Dec 6, 2017
From: DELL SOFTWARE INC.
To: QUEST SOFTWARE INC.
Reel/Frame 044800/0848 →
CORRECTIVE ASSIGNMENT TO CORRECT THE ASSIGNEE PREVIOUSLY RECORDED AT REEL: 040587 FRAME: 0624. ASSIGNOR(S) HEREBY CONFIRMS THE ASSIGNMENT. Recorded Nov 28, 2017
From: CREDIT SUISSE AG, CAYMAN ISLANDS BRANCH
To: QUEST SOFTWARE INC. (F/K/A DELL SOFTWARE INC.); AVENTAIL LLC
Reel/Frame 044811/0598 →
SECOND LIEN PATENT SECURITY AGREEMENT Recorded Nov 10, 2016
From: DELL SOFTWARE INC.
To: CREDIT SUISSE AG, CAYMAN ISLANDS BRANCH, AS COLLATERAL AGENT
Reel/Frame 040587/0624 →
FIRST LIEN PATENT SECURITY AGREEMENT Recorded Nov 9, 2016
From: DELL SOFTWARE INC.
To: CREDIT SUISSE AG, CAYMAN ISLANDS BRANCH, AS COLLATERAL AGENT
Reel/Frame 040581/0850 →
CHANGE OF NAME Recorded Nov 2, 2016
From: DELL SOFTWARE INC.
To: QUEST SOFTWARE INC.
Reel/Frame 040551/0885 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 31, 2016
From: DELL PRODUCTS L.P.
To: DELL SOFTWARE INC.
Reel/Frame 040520/0220 →
RELEASE OF SECURITY INTEREST IN CERTAIN PATENTS PREVIOUSLY RECORDED AT REEL/FRAME (040039/0642) Recorded Oct 31, 2016
From: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A.
To: AVENTAIL LLC; DELL PRODUCTS L.P.; DELL SOFTWARE INC.
Reel/Frame 040521/0016 →
RELEASE OF SECURITY INTEREST Recorded Oct 31, 2016
From: CREDIT SUISSE AG, CAYMAN ISLANDS BRANCH
To: AVENTAIL LLC; DELL PRODUCTS, L.P.; DELL SOFTWARE INC.
Reel/Frame 040521/0467 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 21, 2016
From: PETERSON, MATTHEW T.; PETERSON, DANIEL F.
To: VINTELA, INC.
Reel/Frame 040084/0254 →
CHANGE OF NAME Recorded Oct 21, 2016
From: QUEST SOFTWARE, INC.
To: DELL SOFTWARE INC.
Reel/Frame 040462/0405 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 21, 2016
From: VINTELA, INC.
To: QUEST SOFTWARE, INC.
Reel/Frame 040084/0349 →
SECURITY AGREEMENT Recorded Sep 14, 2016
From: AVENTAIL LLC; DELL PRODUCTS, L.P.; DELL SOFTWARE INC.
To: CREDIT SUISSE AG, CAYMAN ISLANDS BRANCH, AS COLLATERAL AGENT
Reel/Frame 040030/0187 →
SECURITY AGREEMENT Recorded Sep 14, 2016
From: AVENTAIL LLC; DELL PRODUCTS L.P.; DELL SOFTWARE INC.
To: THE BANK OF NEW YORK MELLON TRUST COMPANY, N.A., AS NOTES COLLATERAL AGENT
Reel/Frame 040039/0642 →